Skip to content

[ECS] Update SEI packages to ECS 8.8 (Part 4) - #6328

Merged
taylor-swanson merged 36 commits into
elastic:mainfrom
taylor-swanson:ecs-8.8-part4
Jun 5, 2023
Merged

[ECS] Update SEI packages to ECS 8.8 (Part 4)#6328
taylor-swanson merged 36 commits into
elastic:mainfrom
taylor-swanson:ecs-8.8-part4

Conversation

@taylor-swanson

@taylor-swanson taylor-swanson commented May 25, 2023 •
edited
Loading

Copy link
Copy Markdown
Contributor

What does this PR do?

Note: This PR only updates the ECS version of the selected packages. If additional work is needed to align a package to a new feature provided by ECS, it will be handled in a separate PR.

Updates the following SEI packages to ECS 8.8:

  • squid
  • suricata
  • symantec_endpoint
  • sysmon_linux
  • system_audit
  • tanium
  • tcp
  • tenable_io
  • tenable_sc
  • thycotic_ss
  • ti_abusech
  • ti_anomali
  • ti_cif3
  • ti_cybersixgill
  • ti_misp
  • ti_otx
  • ti_rapid7_threat_command
  • ti_recordedfuture
  • ti_threatq
  • tines
  • trellix_epo_cloud
  • trend_micro_vision_one
  • trendmicro
  • udp
  • vectra_detect
  • winlog
  • zeek
  • zerofox
  • zeronetworks
  • zoom
  • zscaler_zia
  • zscaler_zpa

Changes generated by:

ecs-update -owner elastic/security-external-integrations -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr 6328 packages/<PACKAGE>

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Related issues
@taylor-swanson
[squid] - update ECS to 8.8.0 from 8.7.0
e1b10ab 
This updates the squid integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/squid
@taylor-swanson
[suricata] - update ECS to 8.8.0 from 8.7.0
fc949c2 
This updates the suricata integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/suricata
@taylor-swanson
[symantec_endpoint] - update ECS to 8.8.0 from 8.7.0
7616b06 
This updates the symantec_endpoint integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/symantec_endpoint
@taylor-swanson
[sysmon_linux] - update ECS to 8.8.0 from 8.7.0
ce908c9 
This updates the sysmon_linux integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/sysmon_linux
@taylor-swanson
[system_audit] - update ECS to 8.8.0 from 8.7.0
07785f6 
This updates the system_audit integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/system_audit
@taylor-swanson
[tanium] - update ECS to 8.8.0 from 8.7.0
0b7d6eb 
This updates the tanium integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tanium
@taylor-swanson
[tcp] - update ECS to 8.8.0
d386395 
This updates the tcp integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tcp
@taylor-swanson
[tenable_io] - update ECS to 8.8.0 from 8.7.0
98d9a36 
This updates the tenable_io integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tenable_io
@taylor-swanson
[tenable_sc] - update ECS to 8.8.0 from 8.7.0
d323181 
This updates the tenable_sc integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tenable_sc
@taylor-swanson
[thycotic_ss] - update ECS to 8.8.0 from 8.7.0
65ea5fb 
This updates the thycotic_ss integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/thycotic_ss
@taylor-swanson
[ti_abusech] - update ECS to 8.8.0 from 8.7.0
f902e0b 
This updates the ti_abusech integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_abusech
@taylor-swanson
[ti_anomali] - update ECS to 8.8.0 from 8.7.0
4d07e4b 
This updates the ti_anomali integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_anomali
@taylor-swanson
[ti_cif3] - update ECS to 8.8.0 from 8.7.0
64c0365 
This updates the ti_cif3 integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_cif3
@taylor-swanson
[ti_cybersixgill] - update ECS to 8.8.0 from 8.7.0
f954ba4 
This updates the ti_cybersixgill integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_cybersixgill
@taylor-swanson
[ti_misp] - update ECS to 8.8.0 from 8.7.0
8520911 
This updates the ti_misp integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0, 8.4.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_misp
@taylor-swanson
[ti_otx] - update ECS to 8.8.0 from 8.7.0
24d9627 
This updates the ti_otx integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_otx
@taylor-swanson
[ti_rapid7_threat_command] - update ECS to 8.8.0 from 8.7.0
e314edd 
This updates the ti_rapid7_threat_command integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_rapid7_threat_command
@taylor-swanson
[ti_recordedfuture] - update ECS to 8.8.0 from 8.7.0
f0d617a 
This updates the ti_recordedfuture integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_recordedfuture
@taylor-swanson
[ti_threatq] - update ECS to 8.8.0 from 8.7.0
631d41d 
This updates the ti_threatq integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_threatq
@taylor-swanson
[tines] - update ECS to 8.8.0
de6a9f3 
This updates the tines integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tines
@taylor-swanson
[trellix_epo_cloud] - update ECS to 8.8.0 from 8.7.0
1781110 
This updates the trellix_epo_cloud integration to ECS 8.8.0.
It was referencing elastic/ecs git@v8.7.0 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/trellix_epo_cloud
@taylor-swanson
[trend_micro_vision_one] - update ECS to 8.8.0 from 8.7.0
c8ec8b2 
This updates the trend_micro_vision_one integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/trend_micro_vision_one
@taylor-swanson
[trendmicro] - update ECS to 8.8.0 from 8.7.0
0a68302 
This updates the trendmicro integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/trendmicro
@taylor-swanson
[udp] - update ECS to 8.8.0
a331ce3 
This updates the udp integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/udp
@taylor-swanson
[vectra_detect] - update ECS to 8.8.0 from 8.7.0
dbf5569 
This updates the vectra_detect integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/vectra_detect
@taylor-swanson
[winlog] - update ECS to 8.8.0
8970969 
This updates the winlog integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/winlog
@taylor-swanson
[zeek] - update ECS to 8.8.0 from 8.7.0
a184659 
This updates the zeek integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zeek
@taylor-swanson
[zerofox] - update ECS to 8.8.0 from 8.7.0
ce6740f 
This updates the zerofox integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zerofox
@taylor-swanson
[zeronetworks] - update ECS to 8.8.0
d2cbd13 
This updates the zeronetworks integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zeronetworks
@taylor-swanson
[zoom] - update ECS to 8.8.0 from 8.7.0
5033d63 
This updates the zoom integration to ECS 8.8.0.
It was referencing elastic/ecs git@8.7 and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zoom
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package system_audit - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=system_audit
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package tanium - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=tanium
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package tcp - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=tcp
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package tenable_io - 0.8.0 containing this change is available at https://epr.elastic.co/search?package=tenable_io
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package tenable_sc - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=tenable_sc
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package thycotic_ss - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=thycotic_ss
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_abusech - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=ti_abusech
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_anomali - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=ti_anomali
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_cif3 - 0.7.0 containing this change is available at https://epr.elastic.co/search?package=ti_cif3
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_cybersixgill - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=ti_cybersixgill
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_misp - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=ti_misp
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_otx - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=ti_otx
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_rapid7_threat_command - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=ti_rapid7_threat_command
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_recordedfuture - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=ti_recordedfuture
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package ti_threatq - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=ti_threatq
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package tines - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=tines
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package trellix_epo_cloud - 0.2.0 containing this change is available at https://epr.elastic.co/search?package=trellix_epo_cloud
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package trend_micro_vision_one - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=trend_micro_vision_one
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package trendmicro - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=trendmicro
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package udp - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=udp
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package vectra_detect - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=vectra_detect
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package winlog - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=winlog
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package zeek - 2.9.0 containing this change is available at https://epr.elastic.co/search?package=zeek
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package zerofox - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=zerofox
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package zeronetworks - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=zeronetworks
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package zoom - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=zoom
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package zscaler_zia - 2.10.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zia
@elasticmachine

elasticmachine commented Jun 5, 2023

Copy link
Copy Markdown

Package zscaler_zpa - 1.8.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zpa
sodhikirti07 pushed a commit that referenced this pull request Jun 15, 2023
@taylor-swanson @sodhikirti07
[ECS] Update SEI packages to ECS 8.8 (Part 4) (#6328)
337e42b 
Updates the following SEI packages to ECS 8.8:

- squid
- suricata
- symantec_endpoint
- sysmon_linux
- system_audit
- tanium
- tcp
- tenable_io
- tenable_sc
- thycotic_ss
- ti_abusech
- ti_anomali
- ti_cif3
- ti_cybersixgill
- ti_misp
- ti_otx
- ti_rapid7_threat_command
- ti_recordedfuture
- ti_threatq
- tines
- trellix_epo_cloud
- trend_micro_vision_one
- trendmicro
- udp
- vectra_detect
- winlog
- zeek
- zerofox
- zeronetworks
- zoom
- zscaler_zia
- zscaler_zpa

Changes generated by:

ecs-update -owner elastic/security-external-integrations -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr 6328 packages/<PACKAGE>
orestisfl pushed a commit to orestisfl/integrations that referenced this pull request May 15, 2026
@taylor-swanson
[ECS] Update SEI packages to ECS 8.8 (Part 4) (elastic#6328)
6e3f5be 
Updates the following SEI packages to ECS 8.8:

- squid
- suricata
- symantec_endpoint
- sysmon_linux
- system_audit
- tanium
- tcp
- tenable_io
- tenable_sc
- thycotic_ss
- ti_abusech
- ti_anomali
- ti_cif3
- ti_cybersixgill
- ti_misp
- ti_otx
- ti_rapid7_threat_command
- ti_recordedfuture
- ti_threatq
- tines
- trellix_epo_cloud
- trend_micro_vision_one
- trendmicro
- udp
- vectra_detect
- winlog
- zeek
- zerofox
- zeronetworks
- zoom
- zscaler_zia
- zscaler_zpa

Changes generated by:

ecs-update -owner elastic/security-external-integrations -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr 6328 packages/<PACKAGE>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

3 participants

@taylor-swanson @elasticmachine @kgeller